Changelog
What's new in derUpload.
Security, retention & UI overhaul
2026-09-16- Files are now scanned for malware with ClamAV before they are ever stored; infected uploads are rejected outright.
- Automatic 30-day retention for anonymous uploads that receive no downloads, exactly like the workupload model - files with a chosen retention period keep that fixed date instead.
- Deleting a file (manually or via expiry) now reliably removes it from storage, with a proper confirmation dialog before anything is deleted.
- Rate limiting added to login, two-factor codes and uploads to curb abuse.
- Technical errors (e.g. an expired form token) now show a friendly error page instead of a raw message.
- Multiple Hetzner Storage Boxes can now be configured by an admin; new uploads are cached locally first for a much faster response, then pushed to storage in the background.
- Image and video files now show an inline preview gallery on the download page, alongside the usual download button.
- A brand new visual design across the whole app.
Accounts & collaboration features
2026-08-01- Two-factor authentication (TOTP) for logins.
- Support ticket system.
- Per-user storage quotas, admin-editable.
- Login activity log with country flags and browser detection.
- Profile avatars and an optional "uploaded by" credit on shared files.
Initial release
2026-06-15- Anonymous and account-based file uploads with shareable links.
- Password-protected links, download limits and custom retention periods.